Privacy Policy

Scope and Who We Are

This Privacy Notice details how HeroSpin and its affiliated companies collect and manage personal data belonging to registered players and website visitors. The operator serves as the data controller and determines the purposes and means of processing your information. We collaborate with joint controllers to ensure proper ownership and security of the data provided. For any inquiries or to exercise your data protection rights, please reach out to our Data Protection Officer via [email protected].

Personal Data We Collect

We collect information you supply directly during registration and while using the platform. This encompasses your full name, email address, date of birth, country, phone number, gender, chosen username, and identification documents such as passport or driving licence details. To meet regulatory standards we also require proof of address, source of funds verification, banking information, and financial records. Our systems automatically capture your IP address, device specifications, operating system, browsing activity, session duration, viewed pages, and approximate location. Additional data may come from public records, commercial databases, fraud detection services, and connected social media profiles to support verification and risk management.

Purposes and Lawful Bases for Processing

The personal data we hold enables us to provide, maintain, and enhance our services, address your requests, perform research, prevent fraudulent activity, and promote responsible gambling practices. We process this information to fulfil contractual obligations, satisfy legal requirements including age verification, KYC, AML procedures, and regulatory reporting. In certain cases we rely on legitimate business interests such as safeguarding our operations, improving security, studying player patterns, and offering personalised content. Where consent is given, we may deliver marketing communications, tailor promotions, and display interest-based advertisements. Consent can be withdrawn at any time without impacting the validity of prior processing.

How We Share Your Personal Data

Data sharing occurs only when essential for service delivery. Recipients include our internal staff, group companies, payment processors handling deposits and withdrawals, customer support providers, technology and cloud service partners, marketing agencies, and fraud prevention specialists. Game developers and analytics firms may receive limited data to optimise offerings. During corporate events like mergers or acquisitions, information may transfer to new owners while maintaining the same protective standards. We may also disclose necessary details to authorities or external dispute resolution platforms when legally required or to address complaints, always restricting the information to the minimum needed.

Data Retention and Your Rights

Your personal data is retained only while your account is active or for as long as required by legal obligations such as anti-money laundering regulations. Upon account closure and when no legitimate need remains, we will delete or anonymise the information. You hold several important rights including access to your data, correction of inaccuracies, erasure requests, processing restrictions, data portability, objection to certain processing, and withdrawal of consent. You may also file complaints with your national data protection authority. To invoke these rights, contact our support team at [email protected] or the Data Protection Officer.

Cookies, Security and International Transfers

Cookies and comparable tracking tools are employed to enhance user experience on the site. Strictly necessary cookies function without consent, whereas others require your approval upon first visit. Please consult our Cookie Notice for comprehensive information. We maintain strong technical, organisational, and physical measures to protect your data, although absolute security cannot be guaranteed. When personal data moves outside the EU/EEA, we implement appropriate safeguards including standard contractual clauses or adequacy decisions to uphold equivalent protection levels.

Changes and Contact Information

We may revise this Privacy Notice periodically to reflect updates in operations or legal standards. The current version displays an effective date on the website, and ongoing use of the services signifies acceptance of any modifications. For questions concerning this notice or our data handling procedures, please email [email protected] or [email protected]. We regularly evaluate and update our practices to ensure your personal information receives the highest standard of care and security.